Apache Software Foundation Apache Allura

• CVE-2026-92120 Critical 9.1 Apache Allura: Oauth1 Replay Attack 0.3%
• CVE-2026-92119 Critical 9.1 Apache Allura: REST API Mass Assignment 0.3%
• CVE-2026-92116 Critical 9.1 Apache Allura: OAuth1 missing callback validation 0.3%
• CVE-2026-80190 Medium 6.1 Apache Allura: Stored XSS via code repositories 0.3%
• CVE-2026-81270 High 7.5 Apache Allura: Information exposure via search 0.4%
• CVE-2026-80181 Critical 9.1 Apache Allura: Server-side request forgery 0.5%
• CVE-2026-80180 Medium 6.1 Apache Allura: Stored XSS via markdown HTML processing 0.3%
• CVE-2026-75099 Medium 5.3 Apache Allura: Unauthenticated REST disclosure 0.6%
• CVE-2026-73237 Medium 6.1 Apache Allura: XSS in markdown pipeline 0.8%
• CVE-2026-73238 Medium 6.1 Apache Allura: XSS in code display 0.8%
• CVE-2026-73239 Medium 6.5 Apache Allura: Missing permission checks IDOR 0.6%
• CVE-2026-73240 Critical 9.8 Apache Allura: Git command injection 1.0%
• CVE-2026-69223 Critical 9.1 Apache Allura: Server-side request forgery 0.8%
• CVE-2024-38379 Medium 4.8 Apache Allura: Stored authenticated XSS 0.7%
• CVE-2024-36471 High 7.5 Apache Allura: sensitive information exposure via DNS rebinding 0.8%
• CVE-2023-46851 Unrated Apache Allura: sensitive information exposure via import 1.6%